August 1, 2026
In this article The CaptiveCrunch campaign Storm-2945 and Midnight Blizzard CaptiveCrunch tradecraft and tooling How to protect against CaptiveCrunch activity Microsoft Defender detections and hunting guidance […]
- Filter by
- Categories
- Tags
- Authors
- Show all
- All
- Azure App Service
- Azure Architecture
- Azure Updates
- Command Line
- Community
- Microsoft Security
- Tech Community
- All
- .NET
- #ai-tools
- A…Microsoft Azure
- A2A
- AAD
- acns
- ACP
- ACR
- Active Directory
- Administering Windows Server
- Advanced container networking service
- Adversary-in-the-middle (AiTM)
- agent
- Agent Builder
- Agent Builder and Copilot Studio and Foundry explained
- Agent Builder vs Copilot Studio vs Microsoft Foundry
- agent builder vs Microsoft Foundry
- Agent ID
- Agent Package Manager
- agent service
- Agent Skills
- Agentic
- Agentic AI
- Agentic Workflows
- Agents
- AGENTS.md
- AI
- AI + Machine Learning
- ai agent
- AI agents
- AI Coding Agents
- AI Engineering
- ai gateway
- AI Governance
- AI Measurement
- AI Observability
- AI Security
- AI SRE
- AI troubleshooting
- AI-500
- AI-500 Study Guide
- AI-901
- AI-assisted coding
- AI-assisted development
- AI-Assisted Engineering
- AI-powered automation
- AIOps
- Air-gapped
- AKS
- AKS Bare metal
- ALDO
- AllocationFailed
- ALZ
- analytics
- Android
- Announcement
- Anthropic
- anycast
- api inventory
- API Management
- API Management (APIM)
- APIC
- apim
- APIs
- APM
- App
- App Configuration
- app gateway
- app service
- Application Gateway
- Application Landing Zones
- Arc
- Arc Onboarding
- architecture
- architecture diagrams
- Architecture Review
- arm
- Artificial Intelligence
- ASP.NET Core
- aspire
- Astro
- asymmetric routing
- attributes
- Audio Notes
- auth0
- Authenticaiton
- authentication
- authorization
- automation
- Availability
- Availability Sets
- Availability Zones
- AVD
- aws
- AZ-802
- AZ-900
- Azure
- Azure Active Directory
- Azure AD
- Azure AI
- Azure AI Document Intelligence
- Azure AI Foundry
- Azure AI Fundamentals
- Azure AI Language
- Azure AI Search
- Azure API Center
- Azure API Management
- azure architecture
- Azure Backup
- Azure Bastion
- Azure Bicep
- Azure Bicep Snapshots
- Azure Blob Storage
- Azure Blueprints
- Azure capacity
- Azure Chaos Studio
- Azure CLI
- Azure Cloud Adoption Framework
- Azure Communication Services
- Azure Compute Fleet
- Azure confidential ledger
- Azure Container Apps
- Azure Container lInux
- Azure Container Registry
- Azure Container Storage
- Azure Cosmos DB
- Azure Data Box
- Azure Data Factory
- Azure Data Lake Storage
- Azure Database for MySQL
- Azure Database for PostgreSQL
- Azure Databricks
- Azure DDos Protection
- azure deployment stacks
- Azure DevOps
- Azure Disk Storage
- Azure DocumentDB
- Azure Elastic SAN
- Azure EU
- Azure ExpressRoute
- Azure Files
- Azure Firewall
- Azure Firewall Manager
- Azure Front Door
- Azure Functions
- Azure HorizonDB
- azure hybrid
- Azure Hybrid Networking
- Azure Kubernetes Fleet Manager
- Azure Kubernetes Service
- Azure Kubernetes Service (AKS)
- Azure Landing Zone
- Azure Linux
- Azure Local
- Azure Local Disconnected Operations
- Azure Local LENS
- Azure Local SFF
- Azure Machine Learning
- Azure Managed Grafana
- Azure Managed Redis
- Azure Migrate
- Azure Monitor
- Azure MySQL Flexible Server
- Azure MySQL Flexible Server Replica
- Azure NAT Gateway
- Azure NetApp Files
- Azure Networking
- azure openai
- Azure Policy
- Azure Pricing
- Azure Private Link
- azure rbac
- Azure Red Hat OpenShift
- azure regions
- azure route server
- Azure Sentinel
- Azure Service Fabric
- Azure Site Recovery
- Azure Sphere
- Azure SQL Database
- Azure SQL Managed Instance
- Azure Storage Actions
- Azure Storage Mover
- Azure Synapse Analytics
- azure traffic flows
- Azure Virtual
- Azure Virtual Desktop
- azure virtual network manager
- Azure Virtual Network Routing Appliance
- Azure VMware Solution
- azure-ad-b2c
- azure-arc
- azure-b2c
- azure-communication
- AzureAD
- azurebicep
- azuredevops
- backstage
- backup
- backups vs DR vs HA
- banned
- Batch
- bgp
- Bicep
- bicep-console
- biceplang
- Blizzard
- Book
- bot service
- boundary
- Buzz
- Bypass Microsoft Account
- C#
- career
- careerdevelopment
- cert-manager
- Certifications
- Chrome
- Chromium
- CI/CD
- CI/CD automation
- Claude
- claude-ai
- ClickFix
- Cloud
- Cloud Adoption Framework
- Cloud Architecture
- cloud capacity
- Cloud Infrastructure
- Cloud Native
- cloud networking
- cloud security
- cloud-computing
- cloud-engineering
- cluster operations
- cluster-health
- CNAPP
- CNCF
- code
- Code Review
- code-as-documentation
- codegeneration
- comma separate the tags13:53Claude responded: Microsoft Azure
- Command Line
- Commcault
- Compliance
- compute
- Computer use in Copilot Studio explained
- Conditional Access
- Confidential Compute
- connection monitor
- containers
- copilot
- Copilot CLI
- Copilot cowork
- Copilot in Outlook demos
- Copilot in Outlook demos step by step
- Copilot in Outlook examples
- Copilot in Outlook step by step
- Copilot in Outlook use cases
- Copilot Studio vs Microsoft Foundry
- Copilot under the hood
- copilot-studio
- Cost Optimisation
- credential theft
- csharp
- custom connector copilot studio
- Custom Copilot agents
- custom-auth-extension
- custom-extension
- custom-policies
- Cyberespionage
- Cybersecurity
- Dapr
- data factory
- data lake
- Databases
- datacenter
- DataStream
- DDoS Protection
- Decentralized Identity
- Default Outbound Access
- deployment
- dev
- dev-containers
- Developer Life
- Developer productivity
- Developer Tools
- developer-experience
- developers
- device-code-flow
- devops
- DevOps automation
- DevOps workflows
- devops-practice
- DevSecOps
- diagram automation
- Diagram Generation
- difference between backup and DR?
- Digital Identity
- disaster recovery
- Disconnected
- discuss
- dns
- Domain compromise
- dotnet
- DR
- Draw.io
- ECMA2
- ECMA2Host
- Edge Computing
- EF Core
- egress
- Elevation of privilege
- emulate
- Engineering Effectiveness
- Engineering Productivity
- enterprise-architecture
- entra
- Entra ID
- entra-external-id
- entra-local
- Envoy
- Envoy Gateway
- error-message
- EU cloud
- Event
- Event Grid
- Event Hubs
- event-listener
- Exam AI-500
- Exam SC-500
- Exam SC-730
- Excalidraw
- Excel Copilot demos
- Excel Copilot tasks
- Express Route
- ExpressRoute
- Extortion
- fabric
- fabric capacity
- fault tolerance vs high availability
- Feature
- feature-flags
- Features
- federation
- FIM
- finops
- Firewall
- flatcar
- fluent
- Forest Blizzard (STRONTIUM)
- Forrester Waves
- foundry
- foundry agent service
- Foundry Local
- France Central
- Front Door
- Frontier AI models
- Gallery
- game-design
- game-development
- Gartner Magic Quadrant
- gateway
- gateway api
- genai
- General Development
- Generative AI
- generative ai gateway
- Germany West Central
- GitHub
- GitHub Actions
- GitHub Agentic Workflows
- GitHub CLI
- github copilot
- GitHub Copilot Agent Mode
- GitHub Copilot CLI
- GitHub Copilot SDK
- GitHub Pages
- githubcopilot
- githubcopilotcli
- GitOps
- Global Network
- governance
- granfeldt
- guest
- guid
- Hardware
- HashiCorp
- headlamp
- headlamp-plugin
- Health
- HolmesGPT
- homelab
- How-to
- hrp
- hub routing preference
- hub-and-spoke
- human-operated ransomware
- Hybrid
- Hybrid + Multicloud
- Hybrid Cloud
- hybrid networking
- Hyper-V
- IaC
- IaC Best Practices
- Idempotence
- identity
- Identity and access management
- image
- In development
- In preview
- In the Loop
- Incident response
- InfoSec
- infra
- infrastructure
- Infrastructure As Code
- Inspektor Gadget
- Integration
- Intelligent Terminal
- Intenet
- Internal Developer Platform
- Internet of Things
- IoT
- iperf
- istio
- Italy North
- Jack Tracy
- Jumpstart
- jwt
- Key Vault
- kind
- kubebuddy
- kubectl
- kubernetes
- Kubernetes troubleshooting
- Landing Zones
- Lateral movement
- Launched
- Learn Azure
- LENS
- Lighthouse
- LINUX
- Linux Virtual Machines
- LLM
- LLMOps
- Local AI Deployment
- LocalBox
- Log Alerts
- Log Alerts Dyanmic threshold
- Log Analytics
- Logic Apps
- M365 Local
- macOS
- Madrid
- maf
- malware
- managed private endpoint
- Management
- management agent
- Management and Governance
- Management Groups
- maximum public websites I can add to copilot studio
- MCP
- MCP integration
- mcp simplified
- mcp-server
- MCT
- megaport
- mfa
- micro deployments
- MicroHack
- Microservices
- Microsoft
- Microsoft 365
- Microsoft Agent 365
- Microsoft Agent Framework
- Microsoft Azure
- Microsoft Build
- Microsoft Certification
- microsoft certifications
- Microsoft Certified
- Microsoft Certified Trainer
- Microsoft Defender
- Microsoft Defender for Cloud
- Microsoft Entra
- Microsoft Fabric
- Microsoft Foundry
- Microsoft Graph
- Microsoft Ignite
- Microsoft Intune
- Microsoft Learn
- Microsoft Learning
- Microsoft Purview
- Microsoft Security
- Microsoft Security Insights
- Microsoft Sentinel
- Microsoft Sentinel Data Lake
- Microsoft SQL Server
- microsoftazure
- microsoftfoundry
- Midnight Blizzard (NOBELIUM)
- Migration
- MIM
- Misc
- Mobile
- Model Context Protocol
- MongoDB
- Monitoring
- ms-4022
- msal-react
- Multi-Agent AI Solutions
- Multi-cloud
- multi-cluster
- Multi-Rack
- multicloud
- multiplayer-game
- Musings
- mvp
- native-authentication
- Natural language programming
- network performance
- Network security
- network security group
- network security perimeter
- Network Watcher
- networking
- new
- News
- node disruption policy
- node reimage
- North Europe
- npm
- NSG
- NSP
- nva
- NVIDIA SkillSpector
- OAuth
- oauth 2.0
- oauth 2.1
- oauth2.0
- observability
- oidc
- Okta
- On-premises
- onelake
- OOBE bypass
- open authorization
- open source
- OpenClaw
- opencode
- opencode-go
- openid
- openid connect
- opensource
- openweight
- Operating System
- Outlook
- PaaS
- Packet Capture
- passwords
- patterns
- Pester
- Phishing
- planned maintenance
- Platform Engineering
- Platform Landing Zones
- Platform Operations
- pls
- plsdc
- Pluralsight
- Poland Central
- Policies
- policy
- powershell
- powertoys
- Pricing & Offerings
- Private Endpoint
- private link
- private link service direct connect
- private-key-jwt
- Process Improvement
- Productivity
- programming
- project radius
- Prompt Engineering
- protocols
- Prototyping
- ProvisioningDisabled
- Pull request management
- Pull Requests
- pyspark
- python
- qperf
- Queue Storage
- rag
- ransomware
- ransomware-as-a-service
- RBAC
- RDP
- react
- Recovery point Objective vs Recovery Time Objective (RTO)
- Regions & Datacenters
- register
- Reliability
- remotion
- Repository management
- resource-owner-password
- Retirements
- Review
- Role assignments
- Role Definitions
- roleDefinitions()
- ropc
- route table
- RPO vs RTO
- Run
- SAML
- Sapphire Sleet
- sarif
- SC-500 Exam
- SC-730
- SC-730 Exam
- sd-wan
- SDK and Tools
- sdn
- sdn appliance
- search
- Secret Blizzard
- secured hub
- security
- Security strategies
- Semantic Kernel
- Sentinel
- Sentinel data lake
- service bus
- service mesh
- Services
- SharePoint Online
- SIEM
- sign-up
- signalr
- Simple Log Search Alerts
- sirius appiance
- Sleet
- SLZ
- Small Form Factor
- social
- Social Engineering
- softare-development
- Software-Defined Networking
- software-development
- software-engineering
- Sovereign Clod
- Sovereign Cloud
- Sovereign Landing Zone
- Sovereign Private Cloud
- Sovereign Public Cloud
- Spain
- Spark
- speaking
- spoke-to-spoke
- sql
- SQL Server
- SQL Server on Azure Virtual Machines
- sqlcmd
- SRE
- State-sponsored threat actor
- storage
- Storage Accounts
- Storm
- subnet
- Supply chain attack
- Supply Chain Security
- Sweden Central
- synapse
- Sysprep
- Table Storage
- Tags
- Tasks to perform in Copilot Excel
- teams
- Technology
- Tempest
- Terminal
- Terraform
- terraform-stacks
- theme-builder
- Thomas Maurer
- Token
- Token theft
- Token Usage
- token-issuance
- Tooling
- traffic engineering
- Troubleshoot
- troubleshooting
- tutorial
- udr
- ui
- ui-design
- unattend xml
- Uncategorized
- updated
- Updates
- user-defined route
- ux
- ux-design
- V2
- VDI
- verifiable-credentials
- Verified ID
- vibe-coding
- Video
- videogames
- virtual haub
- virtual hub
- virtual machine
- Virtual Machine Scale Sets
- Virtual Machines
- virtual network
- virtual network appliance
- virtual network flow logs
- Virtual Network Gateway
- Virtual Network Peering
- virtual network routing appliance
- Virtual Networks
- Virtual WAN
- Virtualization
- VirtualMetric
- VirtualMetric DataStream
- Vishing
- Visual Studio Code
- VNet
- voice-models
- vpn
- VPN Gateway
- vrna
- VS Code
- vscode extensions
- vulnerability
- vwan
- Web
- web application firewall
- WEC
- WEF
- West Europe
- what can I do in Copilot Excel
- what can i do in excel using Microsoft 365 Copilot
- What is a backup?
- What is a declarative agent?
- what is Bing Custom Search
- what is disaster recovery?
- what is fault tolerance?
- what is high availability?
- what is model context protocol for beginners
- What is Prompt Copilot Studio
- What is replication?
- what is the difference between DR and HA?
- What is the Microsoft 365 Frontier programme?
- what is workIQ
- what-if
- Windows
- Windows 10
- Windows 11
- Windows deployment
- Windows imaging
- Windows Package Manager
- Windows Server
- Windows Store
- Windows Subsystem for Linux (WSL)
- Windows Terminal
- windows11
- winget
- winui
- wordpress
- WorkIQ vs Microsoft Graph
- XDR
- XML Graph Model
- YAML workflow automation
- Zero Trust
- zero trust workshop AI
- Zurich
- All
- Aidan Finn
- Alan Kinane
- Az Advertizer
- Azure Community Enthusiasts
- azurefeeds
- Azure Tar
- Carlos Mendible
- Charbel Nemnom
- Dan Rios
- Daniel Bradley
- Darren Robinson
- Dieter Gobeyn
- Freek Berson
- Gijs Reijn
- Gregor Suttie
- Imran Rashid
- Jaliya Udagedara
- James Cook
- Jamie Maguire
- John Kilmister
- John Lokerse
- John Savill
- Jose Moreno
- Josh King
- Leo Visser
- Luke Murray
- Maik van der Gaag
- Marc Duiker
- Mark Tinderholt
- Matt Felton
- Nicholas Chang
- Olivier Miossec
- Peter De Tender
- Pixel Roberts
- Rory Braybrook
- Roy Kim
- Sarah Lean
- Scott Hanselman
- Stanislav Zhelyazkov
- Tao Yang
- Thomas Maurer
- Thomas Thornton
- Tobias Zimmergren
- Travis Roberts
- Vukašin Terzić
- Will Velida
July 17, 2026
Published by azurefeeds on July 17, 2026
Categories
In this article Campaign 1: WebDAV-based ClickFix with Python loaders and blockchain C2 Campaign 2: MSHTA-initiated PowerShell chain with steganographic payload delivery Mitigation and protection guidance […]
May 7, 2026
Published by azurefeeds on May 7, 2026
Categories
Microsoft researchers continue to observe the evolution of an infostealer campaign distributing ClickFix‑style instructions and targeting macOS users. In this recent iteration, threat actors attempt to […]